majiayu000 Azure Networking
Design and implement Azure network infrastructure.
Create VNet
az network vnet create \
--resource-group mygroup \
--name myvnet \
--address-prefix 10.0.0.0/16 \
--subnet-name default \
--subnet-prefix 10.0.1.0/24
Network Security Group
az network nsg create \
--resource-group mygroup \
--name mynsg
az network nsg rule create \
--resource-group mygroup \
--nsg-name mynsg \
--name AllowHTTPS \
--priority 100 \
--destination-port-ranges 443 \
--access Allow
Private Endpoint
az network private-endpoint create \
--resource-group mygroup \
--name myendpoint \
--vnet-name myvnet \
--subnet default \
--private-connection-resource-id /subscriptions/.../sql/... \
--group-id sqlServer \
--connection-name myconnection
Best Practices
- Implement hub-spoke topology
- Use NSGs and Azure Firewall
- Enable DDoS protection
- Use private endpoints
- Implement VNet peering